Implement TOFU (Trust On First Use) for pyVmomi · vmware/pyvmomi#160

2014-09-09T14:37:28.000Z

See: [urllib3](https://urllib3.readthedocs.org/en/latest/security.html) and [TOFU](http://www.gnutls.org/manual/html_node/Verifying-a-certificate-using-trust-on-first-use-authentication.html) TODO: - What level of support does Python have for TOFU? - How can we make this behave appropriately for a user at the CLI versus a daemon?

(0 评论) (0 反应) (0 负责人)Python (2,141 star) (807 fork)batch import

help wantedwishlist

描述

See: urllib3 and TOFU

TODO:

What level of support does Python have for TOFU?
How can we make this behave appropriately for a user at the CLI versus a daemon?

贡献者指南

技术栈: python
领域: security
议题类型: feature
难度: 3
预计时间: 3-5 days
活动状态: stale
清晰度: needs investigation
前置要求: Basic PythonSSL/TLS conceptspyVmomi usage
新手友好度: 25
研究方向: Investigate Python's built in ssl module for supporting TOFU, as used in urllib3. Determine if the host key pinning approach can be adapted for the pyVmomi library's HTTP connections. Also consider whether the feature should be configurable per session or globally for CLI vs daemon use cases.